Only the latest release is supported. Security fixes are released as patch versions.
Do not open a public issue for security vulnerabilities.
Report vulnerabilities privately. Include:
- Steps to reproduce
- Affected versions
- Potential impact
This project is maintained on a best-efforts basis. There are no guaranteed response times for security reports.